In Conversation with Cheyanne Mallas: Insights on Cybersecurity Project Management

In today’s volatile cyber landscape, businesses face a constant barrage of threats—from ransomware and phishing campaigns to insider risks and supply chain breaches. Managing security in this environment requires more than just technical know-how; it calls for disciplined cybersecurity project management. We sat down with Cheyanne Mallas, a seasoned expert in the field, to get her perspective on what it takes to lead successful security projects in the modern era.

Q: Cheyanne, how do you define cybersecurity project management?

Cheyanne Mallas: Cybersecurity project management is the structured process of planning, executing, and maintaining initiatives that protect an organization’s digital assets. It’s not just about deploying firewalls or anti-malware tools—it’s about aligning security measures with business goals, managing risks proactively, and ensuring that people, processes, and technology work together seamlessly.

I often say it’s part technical, part operational, and part cultural. You can’t just “install” security; you have to embed it into the DNA of the organization.

Q: What makes cybersecurity projects different from other IT projects?

Cheyanne Mallas: The biggest difference is the dynamic nature of the threat landscape. In many IT projects, you have a fixed set of requirements. In cybersecurity, the requirements can change overnight if a new vulnerability is discovered or regulations shift.

That’s why flexibility is so important. You have to plan with structure but execute with agility. And unlike many IT projects, cybersecurity work often has a compliance and legal component—meaning the stakes for getting it wrong are much higher.

Q: How do you typically start a new cybersecurity project?

Cheyanne Mallas: I start with a comprehensive risk assessment. That means understanding the organization’s most valuable assets, identifying potential threats, and analyzing vulnerabilities. I also engage stakeholders early—executives, department heads, IT teams, even HR—because cybersecurity touches every part of the business.

From there, I create a roadmap that prioritizes actions based on impact and feasibility. That roadmap becomes the guiding document for the entire project.

Q: You mentioned stakeholder engagement. Why is that so critical?

Cheyanne Mallas: Security is not an IT department’s job alone—it’s everyone’s responsibility. If the people in finance, marketing, or operations don’t understand their role in protecting information, even the best tools can fail.

I work hard to ensure stakeholders understand why certain changes are necessary. I avoid jargon and instead talk about business risk and operational continuity. When people see the bigger picture, they’re more likely to support and adopt new measures.

Q: Can you walk us through a recent project you led?

Cheyanne Mallas: Sure, without revealing confidential details. I recently worked with a healthcare organization that needed to upgrade its security to comply with new regulations. We had to modernize their access controls, implement encryption for patient data, and establish a new incident response plan.

We broke the project into three phases: immediate risk mitigation, policy and governance updates, and cultural adoption. Each phase had measurable KPIs, such as reducing unauthorized access attempts and improving staff training completion rates. The project wrapped up on schedule, and their compliance audit passed with zero critical findings.

Q: What are some of the most common mistakes organizations make in cybersecurity projects?

Cheyanne Mallas: A big one is treating security as a one-time project instead of an ongoing process. Another is focusing too much on technology while neglecting training and governance. And, of course, there’s the issue of scope creep—trying to solve every problem in one project instead of prioritizing based on risk.

I’ve also seen projects fail because leadership wasn’t engaged from the start. If executives don’t champion the project, it’s harder to get resources and cooperation.

Q: How do you measure the success of a cybersecurity project?

Cheyanne Mallas: For me, success is multi-dimensional. I look at:

• Reduction in vulnerabilities
• Faster detection and response times
• Compliance scores and audit results
• User adoption and training completion rates
• Long-term sustainability of controls

If the organization is measurably safer and more resilient after the project than before, that’s success.

Q: What role do emerging technologies play in your work?

Cheyanne Mallas: They’re becoming critical. AI-driven analytics help us detect anomalies faster. Cloud-native security tools give us flexibility in hybrid environments. And with quantum computing on the horizon, we’re already discussing post-quantum encryption.

But I’m careful not to adopt tech just because it’s trendy. Any tool has to solve a real business problem and integrate smoothly with existing systems.

Q: Looking ahead, what do you think the future holds for cybersecurity project management?

Cheyanne Mallas: I think we’ll see even more integration of security into every aspect of business operations—what I call “security by design”. Regulations will continue to tighten, and the threat landscape will become more sophisticated, especially with AI-generated attacks.

Project managers will need broader skill sets—technical literacy, regulatory knowledge, and strong communication skills. And the cultural side will only grow in importance. The most secure organizations in the future will be those that view security as a shared mission, not a checkbox.

Q: Any advice for organizations starting a cybersecurity project today?

Cheyanne Mallas: Start with a clear understanding of your risks and priorities. Don’t try to do everything at once—focus on the most critical vulnerabilities first. Get leadership involved early, and don’t neglect training. Remember that technology is only part of the equation; people and processes matter just as much.

And finally, measure your progress. Cybersecurity is a journey, and having the right metrics in place will help you stay on course.

Conclusion

Cheyanne Mallas brings a rare combination of strategic vision, technical knowledge, and human-centered leadership to cybersecurity project management. Her insights highlight the evolving nature of the discipline—one where flexibility, collaboration, and measurable results are key to success.

In an era where threats can emerge and spread in minutes, Mallas’s approach offers a blueprint for organizations that want not just to survive, but to thrive securely in the digital age.